Legal claims defining the scope of protection, as filed with the USPTO.
1. An authentication system for authenticating the identity of a requester of access by an unauthorized service client to a secured resource, said authentication system comprising: a messaging gateway having a first set of instructions embodied in a computer readable medium, said first set of instructions operable to receive from a requester purporting to be an authorized user of a secured resource a request for access by an unauthorized service client to said secured resource; a server in secure communication with said messaging gateway, said server having a second set of instructions embodied in a computer readable medium operable to generate a key string adapted to provide a basis for authenticating the identity of said requester; a service user interface in communication with said server, said service user interface having a third set of instructions embodied in a computer readable medium operable to receive input from said unauthorized service client; wherein said first set of instructions is further operable to communicate said key string to said authorized user that said requester purports to be; wherein said second set of instructions is further operable to receive an authentication credential from said unauthorized service client, said authentication credential having been provided to said unauthorized service client by said requester; and wherein said second set of instructions is further operable to evaluate said authentication credential to authenticate the identity of said requester.
2. The authentication system as recited in claim 1 wherein said second set of instructions is further operable to determine from among a plurality of secured resources associated with said authorized user the identity of a single secured resource to which said requester requests access.
3. The authentication system as recited in claim 2 , wherein said second set of instructions is further operable to determine a priority value for each of said plurality of said secured resources.
4. The authentication system as recited in claim 2 , wherein said second set of instructions includes instructions to: generate an inquiry message; transmit said inquiry message to said authorized user; and receive a response to said inquiry message and determine based upon said response to said inquiry message the identity of a single secured resource to which said requester requests access.
5. The authentication system as recited in claim 2 , wherein said second set of instructions further is operable to generate a plurality of key strings, each one of said plurality of key strings being associated with a single one of said plurality of said secured resources.
6. The authentication system as recited in claim 1 , wherein said second set of instructions includes instructions operable to invalidate said authentication credential based upon passage of time.
7. The authentication system as recited in claim 1 , second set of instructions operable to conduct for the benefit of said unauthorized service client a transaction reliant upon access to said secured resource.
8. The authentication system as recited in claim 7 , said second set of instructions further operable to: generating a receipt for said transaction; and transmitting said receipt to said authorized user.
9. The authentication system as recited in claim 7 , wherein said transaction comprises providing a financial benefit.
10. The authentication system as recited in claim 1 , wherein said request for access comprises a transient identifier for said unauthorized service client, said transient identifier being dynamically generated by said authentication system.
11. A method for authenticating the identity of a requester of access to a secured resource, said method for authenticating comprising the steps of: receiving at a messaging gateway having a first set of instructions embodied in a computer readable medium, said first set of instructions operable to receive from a requester purporting to be an authorized user of a secured resource, a request for access by an unauthorized service client to a secured resource from a requester purporting to be an authorized user of said secured resource; generating a key string with a server in secure communication with said messaging gateway, said server having a second set of instructions embodied in a computer readable medium operable to generate a key string adapted to provide a basis for authenticating the identity of said requester; a service user interface in communication with said server, said service user interface having a third set of instructions embodied in a computer readable medium operable to receive input from said unauthorized service client; wherein said first set of instructions is further operable to communicate said key string to said authorized user that said requester purports to be; wherein said second set of instructions is further operable to receive an authentication credential from said unauthorized service client, said authentication credential having been provided to said unauthorized service client by said requester; and wherein said second set of instructions is further operable to evaluate said authentication credential to authenticate the identity of said requester.
12. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the step of determining from among a plurality of secured resources associated with said authorized user the identity of a single secured resource to which said requester requests access.
13. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 12 , wherein said step of determining said single secured resource comprises sorting said plurality of secured resources by priority values.
14. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 12 , wherein said step of determining said single secured resource comprises: generating an inquiry message, said inquiry message referring to each of said plurality of secured resources by a pseudonym; transmitting said inquiry message to said authorized user; receiving a response to said inquiry message from said authorized user; and determining based upon said response to said inquiry message the identity of a single secured resource to which said requester requests access.
15. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 12 , wherein said step of determining said single secured resource comprises generating a plurality of key strings, each one of said plurality of key strings being associated with a single one of said plurality of said secured resources.
16. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the step of determining based upon passage of time whether said authentication credential should be deemed invalid.
17. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the step of conducting for the benefit of said unauthorized service client a transaction reliant upon access to said secured resource.
18. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 17 , said method for authenticating further comprising the steps of: generating a receipt for said transaction; and transmitting said receipt to said authorized user.
19. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 17 , wherein said transaction comprises providing a financial benefit.
20. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the steps of: generating a dynamic identifier for said unauthorized service client; transmitting to said unauthorized service client said dynamically generated identifier; and receiving said dynamically generated identifier from said requester as at least part of said request for access.
Unknown
September 10, 2013
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.